The recent MediSecure cyber-attack is just one more example of the way online criminals are presenting an ever-increasing threat, with a breach in cyber-security potentially resulting in devastating consequences for an organisation and its customers.

Whilst reliable, sophisticated IT systems, tools, and strategies are essential to protecting against cyber-attacks, if you ask your IT team what the biggest cause of cyber-breaches is, they’ll almost certainly tell you that it’s people doing the wrong thing…so, in essence, cyber-security is a human thing, not an IT thing! Mindful that building human capability is what L&D is all about, we asked one of the Australian Learning and Development Network’s main sponsors, Frontline Management Training, who offer ‘Cyber Security for Non-Technical People’ courses, for some advice on basic ways we can ensure our workforce is cyber-secure.

In today’s digital age, cyber security is no longer solely the concern of IT departments. With cyber threats becoming more sophisticated and prevalent, it is imperative that all employees, regardless of their technical background, are equipped with the knowledge and skills to protect sensitive information. Training non-technical staff in cyber security can seem daunting, but with the right approach, it can be effectively integrated into your organisation’s culture. Here’s a comprehensive guide to achieving this.

Understand the Basics of Cyber Security

Before diving into training, it’s important to identify the core concepts that non-technical staff need to understand. These include:

• Humans vs Tech: Make it clear that cyber security systems and tools can’t and won’t fully protect the organisation and that it’s people that ensure cyber-security.
• Understanding Threats: Familiarise employees with common cyber threats such as phishing, malware, ransomware, and social engineering.
• Password Security: Emphasise the importance of strong, unique passwords and the use of password managers.
• Safe Internet Practices: Educate staff on recognising secure websites (https://), avoiding suspicious downloads, and being cautious with public Wi-Fi.

Develop Engaging Training Programs

As everyone in L&D knows, the key to successful training is making it engaging and relatable. Here are some strategies:

• Interactive Workshops: Conduct hands-on workshops where employees can practice identifying phishing emails, securing their devices, and other essential tasks.
• Real-World Examples: Use case studies and real-world examples to illustrate the consequences of poor cyber security practices and the benefits of vigilance.
• Gamification: Incorporate games and quizzes to make learning fun and to reinforce important concepts. Leaderboards and rewards can motivate participation and retention.

Leverage E-Learning Platforms

E-learning platforms offer flexibility and can cater to different learning paces. Consider the following:

• Modular Courses: Break down the training into manageable modules that cover different aspects of cyber security. This allows employees to learn at their own pace and revisit sections as needed.
• Microlearning: Provide short, focused learning sessions that employees can complete in a few minutes. This can be particularly effective for busy staff members.
• Regular Updates: Ensure the content is regularly updated to reflect the latest threats and best practices.

Incorporate Cyber Security into Daily Routines

To make cyber security second nature, integrate it into daily routines:

• Daily Reminders: Use email or internal messaging systems to send daily tips and reminders about safe practices.
• Regular Drills: Conduct regular cyber security drills, such as simulated phishing attacks, to test and reinforce training.
• Policy Reviews: Periodically review and update cyber security policies, ensuring all employees are aware of and adhere to them.

Foster a Culture of Cyber Security Awareness

Creating a culture of cyber security involves everyone in the organisation. Encourage:

• Open Communication: Create an environment where employees feel comfortable reporting suspicious activities or asking questions about cyber security.
• Leadership Involvement: Have leadership teams actively participate in training and promote the importance of cyber security.
• Peer Support: Establish cyber security champions or ambassadors within different departments who can provide support and share knowledge with their peers.

Measure and Adapt

Finally, measure the effectiveness of your training programs and be ready to adapt:

• Feedback Surveys: Collect feedback from employees to understand what’s working and where improvements are needed.
• Performance Metrics: Use metrics such as phishing test success rates, incident reports, and compliance rates to gauge the effectiveness of the training.
• Continuous Improvement: Regularly update training materials based on feedback and the evolving cyber security landscape.

In Summary

Training non-technical staff in cyber security is crucial in building a cyber-secure organisation. By making the training engaging, incorporating it into daily routines, fostering a culture of awareness, and continuously measuring and improving, you can empower all employees to be vigilant and proactive in protecting your organisation’s digital assets. Remember, cyber security is everyone’s responsibility, and with the right training, non-technical staff can become a vital line of defence against cyber threats.

If you have a Learning & Development article you’d like to share, please send it to AustralianLDN@yahoo.com.au.

Our Sponsors:

The Australian Learning & Development Network’s events and resources are available free of charge to our members due to the generous support of our sponsors. As such, if you’re looking for any externally provided capability development services, we kindly ask that you contact them to discuss your needs.

• James Cook University, Brisbane – Post-Graduate Qualifications and Executive Development Short Courses
• Frontline Management Training Australia – Purpose-Built Leadership and Management Training for Frontline Staff
• Australian Public Sector Training – Programs Built Leadership and Management Training Specifically for People Working in Public Sector Organisations
• Executive Development Australia – Inspiring Executive Excellence
• Tanner James – Training, Coaching, and Consulting for Project, Program, and Portfolio Best Practice!